IAM Security Engineer (12‑month Contract, Hybrid)

About the role

We are looking for an experienced Identity & Access Management (IAM) Security Engineer to lead the design, implementation and continuous improvement of identity security controls across our Microsoft ecosystem and integrated business platforms. The role will act as the technical authority for identity security, working closely with infrastructure, application, cloud and cyber‑security teams to reduce identity‑related risk while supporting business agility.

Key responsibilities

• Design, implement and manage identity security controls in Microsoft Entra ID and related platforms, following Zero Trust principles.
• Develop and maintain Conditional Access policies and enforce Multi‑Factor Authentication, including password‑less and phishing‑resistant methods such as FIDO2 security keys and Microsoft Authenticator.
• Configure and monitor Microsoft Entra Identity Protection, responding to risky users, risky sign‑ins, impossible travel, and privileged account anomalies.
• Administer Microsoft Privileged Identity Management (PIM), implement Just‑In‑Time access, and define governance workflows for privileged accounts.
• Maintain compliance with regulatory and audit requirements, ensuring alignment with organisational and Group cybersecurity standards.

Required profile

• Proven experience designing and operating IAM solutions in a Microsoft‑centric environment.
• Strong understanding of Zero Trust security models and privileged access management.
• Ability to collaborate with cross‑functional teams and act as the technical authority on identity security.

Required skills

• Microsoft Entra ID / Azure AD
• Conditional Access policies
• Multi‑Factor Authentication (MFA) – Microsoft Authenticator, FIDO2 security keys, password‑less authentication
• Self‑Service Password Reset (SSPR)
• Microsoft Entra Identity Protection
• Microsoft Privileged Identity Management (PIM)
• Zero Trust architecture
• Just‑In‑Time (JIT) privileged access